090910hbstudy#3-BGP

BGP
12 Sep 2009

ShakeSoul, Inc.

• •
• BGP • EC2 BGP

•
•
• BGP
• /

doc. ver. 1.0 ShakeSoul, Inc.

• ID : d_sea
• http://www.hatena.ne.jp/d_sea
•
• 2002-2006 : IRI/BBTower(iDC) internet

• 2007-2009.01: 3D “meet-me”

• 2009.02- : (www.shakesoul.net)

•


• BBTower
BGP

•

• BGP
w

•


BGP internet
• BGP internet

• BGP internet

• internet BGP
1

• internet AS

internet
BGP

AS AS
AS AS


BGP
• BGP : Border Gateway Protocol

• BGP-4 : RFC1771

•
• AS preﬁx (IP
)
nexthop

• IPv6 BGP-4+


BGP
• BGP Layer 3

• AS (preﬁx) 1

• /8 /24 OK

• AS preﬁx best path
(advertise)

• internet 26 (2009.06)

• internet full route

• 1 best path


AS
•
• OCN(4713) SoftbankBB(24256) BIGLOBE(2518)

• Sakura internet(9370), BBTower(9607)

• Web

• Google(15169), Yahoo!Japan(23816), mixi(38651)

•

[TODO] AS JPNIC list
http://www.nic.ad.jp/ja/ip/as-numbers.txt

whois -h whois.nic.ad.jp “AS 9607”/e

peer
• AS 1 1 BGP ( 1 1)

• peering

• TCP 179

• Idel => Connect => Active => OpenSent => OpenConﬁrm =>
Established

• conﬁg AS IP address peering
MD5 password

• peer

• peer (
)

peer peer AS2
AS4 AS1
AS3

• (source) (destination)

• source destination

(route)

• 1hop

A
destination
source B X

X ABC ...
C

BGP
1. AS (source) destination IP address

2. destination IP address preﬁx preﬁx
AS

3. AS path

BGP destination path

full route
AS(Upstream) 2 peering


BGP
AS1 1. AS1 AS7 best path AS2

2. AS4 (peer down)

AS2 AS3 3. AS4 peering AS2 BGP
update

4. AS2 update AS1
AS5
AS1 BGP update
AS4
5. update AS7
AS6 AS3 best path

AS7 6. AS3


BGP

2. AS4 (peer down)


×
update

4. AS2 update AS1
AS5
AS1 BGP update
AS4
5. update AS7
AS6 AS3 best path

AS7 6. AS3


BGP

2. AS4 (peer down)


×
update update

4. AS2 update AS1
AS5
AS1 BGP update
AS4
5. update AS7
AS6 AS3 best path

AS7 6. AS3


BGP
update 1. AS1 AS7 best path AS2
AS1

2. AS4 (peer down)


×
update update

4. AS2 update AS1
AS5
AS1 BGP update
AS4
5. update AS7
AS6 AS3 best path

AS7 6. AS3


AS9607
• AS

AS preﬁx
AS iBGP
best path
metric 80
9370
localpref 100
59.106.0.0/17
Community: 9607:13
Sakura
9607:3249

23816 metric 100
• best path
localpref 200
203.216.224.0/19
Yahoo Community: 9607:11

•
Japan 9607:3193 9607:23816

metric 100
38651 localpref 90
110.44.176.0/21 Community:
mixi 2516:1010 9607:3249
•


• /

trafﬁc • Local_Preference

Local
• AS_Path
1
Preference
• MED(Multi Exit Discriminator)
2 AS Path path • Community
• Router ID
3 MED
• conﬁg
LP, MED /
4 Community

• [TODO] Looking Glass
5 Router ID

• http://lg01.colo01.bbtower.ad.jp


BGP conﬁg
Router C-1
interface Gi 0/0
ip address 10.2.255.1 255.255.255.252
ISP A
10.2.0.0/16 ....
AS2 router ospf 1
passive-interface Gi0/0
network 10.2.255.0 252.255.255.255 area 0
Router A-1
....
.2 router bgp 1
network 10.1.0.0 mask 255.255.0.0
BGP 10.2.255.0/30 neighbor 10.2.255.2 remote-as 2
neighbor 10.2.255.2 route-map SAMPLE-IN in
.1 neighbor 10.2.255.2 route-map SAMPLE-OUT out
....
Router C-1
route-map SAMPLE-IN permit 10
set local-preference 200
set community 1:2
AS1 route-map SAMPLE-IN permit 20
10.1.0.0/16 match as-path 222
Customer route-map SAMPLE-OUT permit 10
set metric 10
ip as-path access-list 222 permit ^(2_)+$


demo: Amazon EC2 BGP
@Aamazon EC2
instance 1
• Amazon EC2 2 instance
10.2.0.0/16
AS65002

bgpd
• Quagga(Zebra)
(Quagga)

10.209.162.213
• bgpd.conf peer
10.254.202.228
bgpd
(Quagga)
• route-map
AS65001
10.1.0.0/16
10.11.0.0/16
10.111.0.0/16 • [TODO] ssh login
instance 2

static 1ISP 2
BGP
default route BGP

Internet 1. 1 peer ( )

2. (filter deny
ISP A
)
Router A-1 Router A-2 3.
(deny filter )

4. 1

default route
0.0.0.0/0
Router C-1 Router C-2 5. 2

6. Router C-1/2 default route (BGP
default route )
0.0.0.0/0
ECMP(OSPF) 7.

Customer prefix: 10.0.0.0/8

static 1ISP 2
BGP
default route BGP


2. (ﬁlter deny
ISP A
)
(deny ﬁlter )

4. 1
peering

default route
0.0.0.0/0

default route )
0.0.0.0/0
ECMP(OSPF) 7.


static1ISP 2
BGP
default route BGP


2. (filter deny
ISP A
)
prefix: Full Route
(deny filter )

4. 1
peering

default route
prefix: 10.0.0.0/8
0.0.0.0/0

default route )
0.0.0.0/0
ECMP(OSPF) 7.


static1ISP 2
BGP
default route BGP


2. (filter deny
ISP A
)
prefix: Full Route
prefix: Full Route
(deny filter )

peering 4. 1
peering

default route prefix: 10.0.0.0/8
prefix: 10.0.0.0/8
0.0.0.0/0

default route )
0.0.0.0/0
ECMP(OSPF) 7.


static1ISP 2
BGP
default route BGP


2. (filter deny
ISP A
)
prefix: Full Route
prefix: Full Route
(deny filter )

peering 4. 1
peering

prefix: 10.0.0.0/8 prefix: 10.0.0.0/8

default route )
0.0.0.0/0
ECMP(OSPF) 7.


BGP
Internet

AS2 AS3 • full route upstream 2

• IX peering
upstream
• L2 1 interface

Router Router
C-1 C-2
• AS private
AS1 peering
Router Router Router
C-3 C-4 C-4
• preﬁx

public peer
IX
(Internet eXchange) private peer
•

• peer
AS10 .... AS n AS4


• BGP
AS1

• peer
prefix internet

• prefix

10.0.0.0/16 AS2

AS2 AS3 • AS BGP prefix filter
10.0.0.0/16 192.168.0.0/24 full route ( 26
) config


• BGP
AS1

• peer
prefix internet

• prefix
10.0.0.0/24 AS3
10.0.0.0/16 AS2

10.0.0.0/16 192.168.0.0/24 full route ( 26
) config


10.0.0.0/24
AS2 AS3
• BGP
AS1

• peer
prefix internet

• prefix
10.0.0.0/24 AS3
10.0.0.0/16 AS2

10.0.0.0/16 192.168.0.0/24 full route ( 26
) config


10.0.0.0/24
AS2 AS3
• BGP
AS1

• peer
prefix internet

• prefix
10.0.0.0/24 AS3
10.0.0.0/16 AS2

10.0.0.0/16 192.168.0.0/24 full route ( 26
10.0.0.0/24 ) config
AS3 AS2
Web


BGP
AS2
192.168.0.0/18

•
Router
IGP(Interio Gateway Protocol)

192.168.100.0/30 .1 EGP(Exterio Gateway Protocol)
peering .2

Router_B • IGP OSPF RIP EGP BGP
10.1.0.1

BGP
192.168.0.0/18
192.168.100.1
nexthop
• BGP nexthop AS
IGP
192.168.100,1 ....

Router_C
IGP
192.168.100,1 nexthop •
10.1.0.1 IGP
AS1
10.1.0.0/18


internet

• BGP

AS1

•
conﬁg
AS3
AS2

AS4 Local Preference

AS6 •
AS5
destinatoin AS
AS7

AS1 AS5
•
internet


internet
AS7 AS2 • BGP

AS1

•
conﬁg
AS3
AS2

AS4 Local Preference

AS6 •
AS5
destinatoin AS
AS7

AS1 AS5
•
internet


internet

•
• internet BGP AS BGP best
path

• 26 (2009.06)

• BGP IGP

BGP

•
• AS AS

•
• 100


BGP

• JPNIC • BGP

• AS • BGP

• Preﬁx : IP • conﬁg

• full route •
• Cisco 6500 CRS-1,
Juniper M10i • SNMP trap syslog
/
• 2

• BGP full route •

• 2

BGP
/
• •
• 1 ISP • BGP

•
• BGP
ISP
•

• • /

•

BGP
•
•
•
• 1 interface

• 1 ISP

•

•

• BGP

• Web BGP
BGP

•
or

•

• JANOG

Thank You!!

Any Question?


090910hbstudy#3-BGP

Recomendados

Recomendados

Más contenido relacionado

Destacado

Destacado (18)

Similar a 090910hbstudy#3-BGP

Similar a 090910hbstudy#3-BGP (18)

Más de Hiro Fukami

Más de Hiro Fukami (20)

Último

Último (20)

090910hbstudy#3-BGP